php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #70923 Use of mysqli_stmt_bind_param with mysqlnd_ms results in Segmentation Fault
Submitted: 2015-11-16 13:25 UTC Modified: 2017-10-24 04:30 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:0 (0.0%)
Same OS:0 (0.0%)
From: fz at binsec dot de Assigned:
Status: Suspended Package: mysqlnd_ms (PECL)
PHP Version: 5.6.15 OS: Debian 8.2
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: fz at binsec dot de
New email:
PHP Version: OS:

 

 [2015-11-16 13:25 UTC] fz at binsec dot de
Description:
------------
When using mysqli_stmt_bind_param with mysqlnd_ms enabled, this will result in a Segmentation Fault.

The issue occur with the following versions from the PHP Debian packages:
php5-cgi        5.6.14+dfsg-0+deb8u1
php5-cli        5.6.14+dfsg-0+deb8u1
php5-mysqlnd    5.6.14+dfsg-0+deb8u1
php5-mysqlnd-ms 1.6.0-1+b1

The code below result in a Segmentation Fault:
php5 dbtest.php
Segmentation fault




Test script:
---------------
<?php

$db = mysqli_connect('api');

$stmt = mysqli_prepare($db, 'SELECT * FROM ms_test WHERE id = ? LIMIT 0,1');
$id = 1;
mysqli_stmt_bind_param($stmt, 'd', $id);
mysqli_stmt_execute($stmt);

mysqli_close($db);



Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2017-10-24 04:30 UTC] kalle@php.net
-Status: Open +Status: Suspended
 [2017-10-24 04:30 UTC] kalle@php.net
I'm gonna suspend this report as the mysqlnd_ms had not a release since 2013 or active commit activity since then, if activity comes back to this package, it should be re-opened
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Tue May 13 07:01:26 2025 UTC